Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
File: TKvzOws4CIj-HjuA7aSLF4G7dwk.mft (raw, json)
Hash identifier: J4EwBZ2xSyJNwZAd3z+6daXymJv41Sql1RxkoU34RQU=
Subject key identifier: 7C:00:1E:E7:27:E1:A4:51:0D:C1:9D:5E:96:83:CE:8F:39:54:2D:7F
Authority key identifier: 4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
Certificate issuer: /CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Certificate serial: 019A50E33D72E0AFBCBBCB4BA5A144CF6EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 22:01:00 +0000
Manifest this update: Tue 04 Nov 2025 22:01:00 +0000
Manifest next update: Wed 05 Nov 2025 22:01:00 +0000
Files and hashes: 1: Ej6AGqgrDcCEmdxGQ51_3en2bK0.roa (hash: iJ7FETE7qwjnaLdIl0yVteeRiSysQ9U3gczbrqrkwXU=)
2: TKvzOws4CIj-HjuA7aSLF4G7dwk.crl (hash: EuFI5OoSqapgw/98fCuF2J6ySIpn9Y6iIyP3EEX4HgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:3d:72:e0:af:bc:bb:cb:4b:a5:a1:44:cf:6e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Validity
Not Before: Nov 4 22:01:00 2025 GMT
Not After : Nov 5 22:01:00 2025 GMT
Subject: CN=7c001ee727e1a4510dc19d5e9683ce8f39542d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:33:07:bb:04:2d:56:fc:06:11:41:51:b1:
c8:dc:0f:5b:f2:7b:cc:1c:be:34:1a:13:c9:eb:e9:
33:17:c6:fa:13:40:5a:2a:18:cc:de:19:46:f7:e9:
9c:38:c5:97:a1:c4:63:6a:c3:d8:26:9b:e2:39:b2:
06:ba:97:7f:b0:a6:c9:c0:e3:1e:62:9d:66:27:cd:
1b:f4:35:e5:e1:86:bf:ea:d2:f0:16:87:95:e5:03:
93:44:4e:23:fa:45:be:19:a2:16:ae:26:d3:9d:41:
ab:c5:07:1d:04:3f:2a:9d:83:6f:11:85:d2:27:2f:
98:55:95:cd:2c:61:b9:79:9b:f0:77:9f:13:66:37:
fa:3a:6f:58:02:3e:10:7b:14:76:95:89:58:9a:8b:
86:0e:23:20:b7:12:2f:a1:a5:15:6e:98:5b:5f:2d:
0f:0a:48:e7:47:64:65:27:3a:bd:9d:90:11:83:e6:
cb:e4:b0:14:5f:29:2b:0e:8a:e8:90:fa:ce:04:af:
ab:e5:e4:ed:04:fb:3c:85:c2:09:e6:ef:8a:8c:d5:
09:56:e9:b7:3f:64:a8:eb:91:91:3f:c1:bc:f6:b5:
98:e4:e7:67:e4:ef:3d:e1:fc:55:8d:dc:bf:67:b1:
1a:5c:64:20:df:76:62:85:b7:68:8f:a3:dc:e9:29:
00:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:00:1E:E7:27:E1:A4:51:0D:C1:9D:5E:96:83:CE:8F:39:54:2D:7F
X509v3 Authority Key Identifier:
keyid:4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c3:5a:f8:55:90:c5:ed:40:12:3a:7e:77:2c:82:08:ff:dc:
12:05:6f:7c:ab:45:21:67:1e:02:e7:c8:6a:c9:44:53:98:59:
04:1e:f8:b2:95:c3:ce:e4:88:90:16:13:db:c5:30:23:27:ca:
15:df:18:a5:c5:65:0f:2b:07:da:43:8c:45:68:7a:f5:fc:d9:
6e:44:28:cb:24:e8:f7:ca:a0:20:8c:15:f1:76:9b:b1:ad:01:
e8:25:59:15:73:2e:64:f2:69:97:11:c2:80:9e:60:c4:97:60:
29:85:7a:3b:77:7b:d0:16:91:61:d4:7a:03:f0:35:19:0f:6b:
b0:6f:31:fe:58:a7:54:6b:6b:4e:c0:c3:bf:97:4f:55:c6:2d:
a4:68:61:88:ba:c0:6e:18:68:26:a6:8b:ee:25:8d:0d:b1:cd:
13:b2:ed:05:a9:bc:ca:33:16:f5:e9:54:2c:83:0f:5d:16:19:
b9:04:8d:71:9c:c8:68:b6:11:0b:51:f1:64:8c:4e:97:08:b0:
3e:1b:f4:41:9f:17:58:3a:b0:74:5d:75:f0:21:26:24:46:72:
6f:0f:9e:b7:49:4b:2c:42:7d:01:8a:c6:e4:57:0a:58:99:80:
74:a6:4b:b2:ad:63:ee:00:13:7c:72:92:6c:b1:99:bf:eb:29:
6e:00:7c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:57 2025 by rpki-client